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distributed task-based modes of collaboration that did not allow full participation by members o 
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Open-Source Software (OSS) development is regarded as a successful model of encouraging "n 
product evolution". To understand how this "natural product evolution" happens, we have condi 
case study of four typical OSS projects. Unlike most previous studies on software evolution that 
on the evolution of the system per se, our study takes a broader perspective: It examines not c 
the evolution of OSS systems, but also the evolution of the associated OSS communities, as we 
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' " ' review 

Many modern electronic systems— including personal computers, PDAs, cell phones, network rc 
smart cards, and networked sensors to name a few— need to access, store, manipulate, or 
communicate sensitive information, making security a serious concern in their design. Embedde 
systems, which account for a wide range of products from the electronics, semiconductor, 
telecommunications, and networking industries, face some of the most demanding security com 
-on the one hand, they are oft ... 
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Full text available: 'g) pdf(300.86 KB) Additional Information: full citation , abstract , references , index terms 

Autonomic communications seek to improve the ability of network and services to cope with 
unpredicted change, including changes in topology, load, task, the physical and logical characte 
of the networks that can be accessed, and so forth. Broad-ranging autonomic solutions require 
designers to account for a range of end-to-end issues affecting programming models, network i 
contextual modeling and reasoning, decentralised algorithms, trust acquisition and maintenance 
issues whose soluti ... 
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Computer networks and computer systems are experiencing attacks and threats from many are 
Threats are also extended to include the individual user's computer assets and resources. Inforr 
will be presented on the categories of security and privacy threats, integrity threats, vulnerabilit 
delay and denial threats, and intellectual property threats that are being directed towards corpc 
educational, governmental, and individual assets. 
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Full text available:^] pdf(1.57 MB) Additional Information: full citation , abstract , references , citings, index term; 

In distributed software development, two sorts of dependencies can arise. The structure of the 
software system itself can create dependencies between software elements, while the structure 
development process can create dependencies between software developers. Each of these bott 
shapes and reflects the development process. Our research concerns the extent to which, by loc 
uniformly at artifacts and activities, we can uncover the structures of software projects, and the 
in which ... 
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Full text available: ^| pdf(655.02 KB) Additional Information: full citation , abstract , references , index terms 

The goal of this paper is to study secure and usable methods for providing user input to a websi 
Three principles define security for us: certification, awareness, and privacy. Four principles def 
usability: contextual awareness, semantic awareness, prodigious use of screen space, and the 
availability of recommended choices. We first describe how current approaches to the solicitatior 
user input on the web fail on both fronts: they either can not handle certified data, do not resp 
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We discuss an authentication method using multiple communication channels. This method enal 
on-line service providers to strongly authenticate their users on a non-trusted communication cl 
(e.g. using a kiosk PC in an Internet cafe to access the Internet) via trusted communication cha 
(e.g. a mobile phone network). For the illustration purpose, we use a commonly available 
configuration in the current marketplace, in which users access service providers through PCs o 
the Inte ... 
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As more business activities are being automated and an increasing number of computers are be 
used to store sensitive information, the need for secure computer systems becomes more appai 
This need is even more apparent as systems and applications are being distributed and accesse 
an insecure network, such as the Internet. The Internet itself has become critical for governmer 
companies, financial institutions, and millions of everyday users. Networks of computers suppor 
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Computer security protocols usually terminate in a computer; however, the human-based servi( 
which they support usually terminate in a human. The gap between the human and the comput 
creates potential for security problems. We examine this gap, as it is manifested in secure Web 
servers. Felten et al. demonstrated the potential, in 1996, for malicious servers to impersonate 
honest servers. In this paper, we show how malicious servers can still do this— and can also for 
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We describe the architecture for a single-chip aegis processor which can be used to build compi 
systems secure against both physical and software attacks. Our architecture assumes that all 
components external to the processor, such as memory, are untrusted. We show two different 
implementations. In the first case, the core functionality of the operating system is trusted and 
implemented in a security kernel. We also describe a variant implementation assuming an untrt 
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